Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c31435ba-a415-393e-80eb-2748f94d55b6.roa
File:                     c31435ba-a415-393e-80eb-2748f94d55b6.roa (raw, json)
Hash identifier:          MHrwjA9AASgu+x7FbQnbgJnPc9kfEtqBhQkp0CfZ6C4=
Subject key identifier:   B5:D3:35:0C:2C:C5:A4:E0:D3:C2:24:52:6F:AA:6E:F9:E9:8B:82:D3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D7B6A8AA2E81AA7EDAC6998C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c31435ba-a415-393e-80eb-2748f94d55b6.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     30103
IP address blocks:        166.108.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:8a:a2:e8:1a:a7:ed:ac:69:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=a07baa57-6936-4ded-b457-33dc5b11e5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:3f:50:13:51:5e:be:b8:2d:65:51:63:6f:
                    53:2c:a6:e4:ff:53:fb:f1:e3:0f:71:38:37:ff:98:
                    72:50:71:cc:67:0f:cc:1c:0b:73:04:4f:01:37:f4:
                    f5:92:cb:35:d8:f4:de:9c:e7:5c:69:9d:2d:bb:dd:
                    e8:d2:08:39:b9:ae:df:08:c7:63:a4:28:e6:02:fd:
                    d2:86:63:96:a8:cc:28:d4:4a:e7:d4:a1:8b:73:d6:
                    66:57:ba:2f:8b:9f:43:09:48:23:e5:c4:fc:60:95:
                    51:89:ff:1e:8d:64:8b:14:08:a3:04:72:e8:5f:91:
                    f5:e3:84:2c:f5:7c:04:0f:44:81:76:6d:42:5a:bc:
                    e7:ca:7d:a3:4b:9e:e5:bc:52:eb:0c:7f:cf:fc:47:
                    83:ec:50:5c:ea:e7:a5:e4:a2:c6:06:3c:67:b1:0a:
                    0d:f5:56:57:5f:3b:1e:57:42:09:4d:23:00:82:e9:
                    5a:a8:d8:b8:84:c0:c8:a3:d4:06:13:5c:85:89:c6:
                    fd:8e:5a:e7:ba:ca:dd:2d:e3:82:d4:d5:a3:9b:69:
                    d3:cc:ad:d4:7d:4a:45:f7:43:23:83:22:48:57:5c:
                    3b:a2:ce:ba:1c:bc:c0:a9:12:8b:6e:2e:c0:8f:9e:
                    b9:27:aa:bc:6a:7e:76:8b:26:b4:b3:4f:ef:94:df:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:35:0C:2C:C5:A4:E0:D3:C2:24:52:6F:AA:6E:F9:E9:8B:82:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c31435ba-a415-393e-80eb-2748f94d55b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.108.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:70:7b:73:d3:77:3a:27:4d:64:09:9e:26:5f:44:dc:27:
         4a:ce:e8:f0:f4:f8:dd:74:03:fc:70:0a:20:37:ab:43:93:ce:
         83:81:aa:2c:9d:aa:ff:d5:af:2a:bf:6b:82:84:d9:c5:72:83:
         bb:93:59:da:f1:35:de:3e:f3:b7:ae:a6:c6:64:3e:87:e9:4c:
         87:8c:5a:8e:ca:6f:7f:2b:74:6c:5f:47:ff:31:a0:93:6d:b8:
         69:47:33:9e:a2:60:8c:6d:e1:82:4e:0d:f9:ca:f0:91:b6:f3:
         ee:7d:06:39:49:cd:cf:a5:0e:e0:96:27:34:e8:4d:54:a0:71:
         5b:94:53:fa:0b:7b:d5:80:44:33:dd:21:b9:77:3c:3e:ef:0b:
         3f:34:96:7a:c0:b5:5f:ab:89:30:fd:88:38:59:cb:68:1f:7d:
         e9:c7:d1:da:22:42:b6:05:22:84:5c:23:b4:19:2d:3c:d5:0d:
         6f:b3:ea:92:a6:f0:f8:98:87:8e:0c:a0:d3:a7:6e:c6:87:d4:
         2d:c1:6d:50:26:2c:d6:f8:ad:83:14:95:7c:cd:e0:8a:89:20:
         3b:24:30:0d:c9:33:a7:b9:dc:2d:63:3e:71:a2:01:e2:92:c5:
         9e:04:aa:16:52:55:e4:70:e4:ae:62:b1:d5:89:68:05:08:68:
         84:85:52:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoqi6Bqn7axpmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
YTA3YmFhNTctNjkzNi00ZGVkLWI0NTctMzNkYzViMTFlNWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy78/UBNRXr64LWVRY29TLKbk/1P78eMPcTg3
/5hyUHHMZw/MHAtzBE8BN/T1kss12PTenOdcaZ0tu93o0gg5ua7fCMdjpCjmAv3S
hmOWqMwo1Ern1KGLc9ZmV7ovi59DCUgj5cT8YJVRif8ejWSLFAijBHLoX5H144Qs
9XwED0SBdm1CWrznyn2jS57lvFLrDH/P/EeD7FBc6uel5KLGBjxnsQoN9VZXXzse
V0IJTSMAgulaqNi4hMDIo9QGE1yFicb9jlrnusrdLeOC1NWjm2nTzK3UfUpF90Mj
gyJIV1w7os66HLzAqRKLbi7Aj565J6q8an52iya0s0/vlN8edwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXTNQwsxaTg08IkUm+qbvnpi4LTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzMxNDM1YmEtYTQxNS0z
OTNlLTgwZWItMjc0OGY5NGQ1NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFpmxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABntcHtz03c6J01kCZ4mX0TcJ0rO6PD0+N10A/xwCiA3q0OTzoOBqiyd
qv/Vryq/a4KE2cVyg7uTWdrxNd4+87eupsZkPofpTIeMWo7Kb38rdGxfR/8xoJNt
uGlHM56iYIxt4YJODfnK8JG28+59BjlJzc+lDuCWJzToTVSgcVuUU/oLe9WARDPd
Ibl3PD7vCz80lnrAtV+riTD9iDhZy2gffenH0doiQrYFIoRcI7QZLTzVDW+z6pKm
8PiYh44MoNOnbsaH1C3BbVAmLNb4rYMUlXzN4IqJIDskMA3JM6e53C1jPnGiAeKS
xZ4EqhZSVeRw5K5isdWJaAUIaISFUpk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:09 2026 by rpki-client